Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.
-
Updated
Mar 24, 2026 - Rust
Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.
Tool that gathers a customizable set of ETW telemetry and generates user-defined detections
Panoptes Endpoint Detection and Response Solution
enpoint detection / live analysis & sandbox host / signatures quality test
A framework and build automation tool to process exploits/payloads to evade antivirus and endpoint detection response products using reusable building-blocks like encryption or obfuscation. Mirrors: https://gitlab.com/0xCCF4/expkit . Create issues and merge request on gitlab.
Library and command line tool for interacting with Carbon Black environments.
Full-stack Endpoint Detection & Response (EDR) system with real-time threat detection, active remediation, CNN-LSTM ML classification, and centralized security console.
On a scale of one to America, this NextGen Norton Antivirus EDR just made enterprise-grade defense free. Built by a Norton, carrying forward a name rooted in cybersecurity history, reimagined for modern threats.
Host-based Endpoint Detection & Response (EDR) proof-of-concept using machine learning and explainable AI for realtime threat monitoring.
multi arch os osquery travisci pipeline python virtuenv
Uses the Damerau-Levenshtein distance to find suspicious tasks running on endpoints in Windows.
Talks and lectures I've delivered.
Collection of scripts for Fidelis CyberSecurity EDR
Python-based Endpoint Detection and Response (EDR) prototype that monitors system processes, detects suspicious behavior, and generates incident response reports.
Iru (formerly Kandji) is a San Francisco based endpoint management and security company whose AI-powered platform unifies workforce identity and access, cross-platform endpoint management for macOS, iOS, iPadOS, tvOS, visionOS, Windows and Android, endpoint detection and response, vulnerability management, compliance automation and a…
Add a description, image, and links to the endpoint-detection-response topic page so that developers can more easily learn about it.
To associate your repository with the endpoint-detection-response topic, visit your repo's landing page and select "manage topics."